ep's blog

Adobe Shockwave Player Four Integer Overflow Vulnerabilities


"Affected: Adobe Shockwave Player"

"Secunia Research has discovered four vulnerabilities in Adobe
Shockwave Player, which can be exploited by malicious people to
compromise a user's system.

The vulnerabilities are caused by four integer overflow errors
when processing a certain block type. These can be exploited to cause
heap-based buffer overflows via specially crafted Shockwave files.

Cisco IOS XR Software SSH Denial of Service Vulnerability


"The SSH server implementation in Cisco IOS XR Software contains a
vulnerability that an unauthenticated, remote user could exploit to
cause a denial of service condition."

"Products Confirmed Not Vulnerable

SSH server implementations in Cisco IOS Software and Cisco IOS XE
Software are not affected by this vulnerability."

Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack (affects Windows NT through 7)



In order to support BIOS service routines in legacy 16bit applications,
the Windows NT Kernel supports the concept of BIOS calls in the
Virtual-8086 mode monitor code."

"Upon successful exploitation, the kernel stack is switched to an attacker
specified address." This would allow arbitrary code execution with
escalated privileges.

HP Power Manager, Remote Execution of Arbitrary Code


"Potential security vulnerabilities have been identified with HP Power
Manager. The vulnerabilities could be exploited remotely to execute
arbitrary code.

References: CVE-2009-3999, CVE-2009-4000

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
HP Power Manager earlier than v4.2.10"

It is recommended that users of this software update immediately to
avoid risk.


Microsoft Security Advisory (979352) Vulnerability in Internet Explorer Could Allow Remote Code Execution


This is the flaw that was key in the 'Operation Aurora' attack on Google
last week. There are several workarounds that could be employed to help
mitigate the attack.

Running with Internet zone set to High, running with Data Execution
Prevention (DEP) or not running Internet Explorer at all will help to
avoid this issue.

Top Ten Web Hacking Techniques of 2009 - Jeremiah Grossman


"The diversity, volume, and innovation of the research was impressive. Competition was as fierce as ever and the judges had their work cut out. Rich Mogull, Dinis Cruz, Chris Hoff, HD Moore, Billy Rios, Dan Kaminsky, Romain Gaucher, Steven Christey, Jeff Forristal, and Michal Zalewski were tasked with ranking the field based upon novelty, impact, and overall pervasiveness."

Vulnerabilities in Adobe Flash Player 6 Provided in Windows XP Could Allow Remote Code Execution


"Microsoft is aware of reports of vulnerabilities in Adobe Flash Player
6 provided in Windows XP. We are not aware of attacks that try to use
the reported vulnerabilities or of customer impact at this time but
recommend that users install the latest version of Flash Player provided
by Adobe."